# Secrets Management and Pipeline Hardening

> Master the secure lifecycle of credentials and the fortification of CI/CD pipelines against supply chain attacks and credential theft.

Canonical: https://codelivly.com/learning-paths/secrets-management-and-pipeline-hardening
Last updated: 2026-10-29

| | |
|---|---|
| Level | Intermediate |
| Category | Cybersecurity |
| Rooms | 5 |
| Lessons | 25 |
| Estimated time | 2 h 30 min |

This advanced learning path bridges the critical gap between infrastructure provisioning and secure software delivery. You will learn why traditional secret management fails at scale and how to implement robust, dynamic credential systems using tools like HashiCorp Vault and cloud-native secret managers. The path then transitions to the CI/CD pipeline, teaching you how to threat-model your delivery workflows, eliminate long-lived credentials using OpenID Connect (OIDC), harden runner environments, and prevent workflow injection attacks. The path culminates in a comprehensive guided lab where you will secure a vulnerable CI/CD pipeline, integrate it with a dynamic secrets backend, and enforce strict supply chain security controls.

## Rooms in this path

1. [Secrets Management with HashiCorp Vault](https://codelivly.com/rooms/secrets-management-with-hashicorp-vault) - Master dynamic secrets, centralized credential management, and secure authentication using HashiCorp Vault to eliminate…
2. [CI/CD Attack Surface](https://codelivly.com/rooms/cicd-attack-surface) - Master CI/CD pipeline threat modeling, runner security, and the prevention of secret leakage and workflow injection…
3. [Securing CI/CD Runners and Agents](https://codelivly.com/rooms/securing-cicd-runners-and-agents) - Master the security of CI/CD compute environments, differentiating between ephemeral and self-hosted runners, and…
4. [OIDC and Keyless Pipeline Authentication](https://codelivly.com/rooms/oidc-and-keyless-pipeline-authentication) - Master OpenID Connect for CI/CD. Learn to implement keyless authentication, eliminate static secrets, and configure…
5. [Repository and Branch Protection Governance](https://codelivly.com/rooms/repository-and-branch-protection-governance) - Master repository security, branch protection rules, code owner enforcement, and preventing unauthorized pipeline…

## Related

- [Career path: DevSecOps Engineer](https://codelivly.com/career-paths/devsecops-engineer)
- [Security Monitoring and Compliance Automation](https://codelivly.com/learning-paths/security-monitoring-and-compliance-automation)
- [Software Supply Chain Security](https://codelivly.com/learning-paths/software-supply-chain-security)
- [Infrastructure as Code Security](https://codelivly.com/learning-paths/infrastructure-as-code-security)